Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File:                     bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier:          H/43ooF1vCMs1uD4P12xhfweVNkAE9+SvCZzQQ9vKiU=
Subject key identifier:   EE:F4:E5:A3:5D:6F:6C:95:C8:1D:6C:10:4B:00:5F:3A:97:BE:04:96
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer:       /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial:       019CAC7DB95DC4AB71F81E986B9471459CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number:          0E19
Signing time:             Mon 02 Mar 2026 03:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:46 +0000
Files and hashes:         1: HsWvQkqyqgqDj3X8qhIGW0Flnwc.roa (hash: jMcB1wDEamsFEqTFzPF8IyJgQTNPejP9vTcaIBOsBpk=)
                          2: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: w+0JsiNzvrxBwpq1mmT0pUjfy5wUbNllbCOyqvHIyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:b9:5d:c4:ab:71:f8:1e:98:6b:94:71:45:9c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
        Validity
            Not Before: Mar  2 03:00:46 2026 GMT
            Not After : Mar  3 03:00:46 2026 GMT
        Subject: CN=eef4e5a35d6f6c95c81d6c104b005f3a97be0496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:eb:81:fa:09:23:c9:6c:49:8e:1d:79:c0:
                    73:3e:d5:ae:b4:05:1c:52:ce:4c:81:11:b0:54:17:
                    22:c5:3d:f3:94:5f:0e:ad:e5:b2:9b:19:d6:9d:f0:
                    c1:35:6c:47:e7:68:68:53:25:39:0d:1e:85:58:88:
                    5e:39:bb:a2:2b:28:52:c0:5d:00:52:37:4b:7b:df:
                    00:03:2f:20:6c:fc:9d:15:8b:61:b5:1f:a6:86:4a:
                    49:4f:d3:e4:84:95:ac:48:47:31:16:40:c9:fe:3b:
                    69:e6:ae:cb:25:23:f5:0b:71:f8:f0:07:0e:66:2f:
                    e3:ee:f6:11:63:24:c0:86:ea:44:51:96:de:c0:8a:
                    86:9b:02:b9:d8:7f:84:1c:13:16:a7:00:ab:8b:f7:
                    41:42:3d:3c:eb:81:03:5a:e0:67:48:f7:b1:72:41:
                    19:98:32:1c:13:d1:0b:b8:e4:9c:56:c6:71:42:a8:
                    f7:8b:a7:60:9b:fe:83:ab:6f:0f:a2:f3:b4:13:22:
                    ad:d3:58:9d:e9:b7:3c:a3:7f:80:1d:e7:4d:24:dc:
                    4c:f5:e9:c3:94:b3:20:c0:96:bc:52:0d:e7:ca:b7:
                    5e:e7:5c:94:05:e4:44:b6:97:5a:80:0e:c9:ce:3d:
                    8e:eb:80:42:0c:99:a7:15:b4:97:98:c3:71:44:38:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:E5:A3:5D:6F:6C:95:C8:1D:6C:10:4B:00:5F:3A:97:BE:04:96
            X509v3 Authority Key Identifier:
                keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:73:62:87:80:92:ce:3b:c7:7e:53:30:71:4d:a9:4c:d8:2b:
         3f:8f:6a:f1:7d:89:47:2c:50:d3:4c:bd:bd:20:54:1b:89:61:
         42:c8:ee:16:e4:f6:c2:ef:2f:48:74:3c:97:27:60:4f:9a:cd:
         3f:59:c4:72:f2:59:1e:b9:49:02:a0:8c:f0:5d:bb:8a:29:da:
         e7:26:8f:ea:12:ad:d5:56:ed:50:e3:d6:b2:3f:e1:0f:1b:79:
         9f:1a:6b:01:4f:cc:96:b6:f9:0e:91:93:5b:2c:23:cb:0c:a4:
         fb:ff:af:6e:8a:c3:df:72:d8:8d:62:16:b9:4c:3b:7b:d6:82:
         48:51:dd:8e:fa:fe:d4:00:14:3b:57:a7:3d:bc:59:30:aa:d2:
         a1:77:e5:d3:89:d0:d0:36:87:f4:c2:7b:b2:7f:ad:cf:e2:f8:
         4e:d7:08:bd:9c:61:c5:09:bc:af:37:43:87:d0:f2:d8:da:7b:
         c7:ce:a7:bf:12:d7:05:66:8a:a3:cb:89:62:1a:81:cc:e6:d3:
         ab:a4:4c:e7:91:54:1f:5c:af:31:88:cb:82:e6:04:cb:be:69:
         36:05:9b:89:27:dd:95:91:e1:d3:91:dc:43:8b:3f:2a:2c:74:
         66:22:92:8c:31:90:e0:ca:17:d0:56:39:55:d5:24:55:9e:8d:
         7b:61:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:42 2026 by rpki-client